{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,31]],"date-time":"2026-07-31T02:32:44Z","timestamp":1785465164917,"version":"3.56.0"},"reference-count":55,"publisher":"MDPI AG","issue":"3","license":[{"start":{"date-parts":[[2017,8,5]],"date-time":"2017-08-05T00:00:00Z","timestamp":1501891200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Future Internet"],"abstract":"<jats:p>Cloud Computing is a computing model that allows ubiquitous, convenient and on-demand access to a shared pool of highly configurable resources (e.g., networks, servers, storage, applications and services). Denial-of-Service (DoS) and Distributed Denial-of-Service (DDoS) attacks are serious threats to the Cloud services\u2019 availability due to numerous new vulnerabilities introduced by the nature of the Cloud, such as multi-tenancy and resource sharing. In this paper, new types of DoS and DDoS attacks in Cloud Computing are explored, especially the XML-DoS and HTTP-DoS attacks, and some possible detection and mitigation techniques are examined. This survey also provides an overview of the existing defense solutions and investigates the experiments and metrics that are usually designed and used to evaluate their performance, which is helpful for the future research in the domain.<\/jats:p>","DOI":"10.3390\/fi9030043","type":"journal-article","created":{"date-parts":[[2017,8,9]],"date-time":"2017-08-09T06:32:14Z","timestamp":1502260334000},"page":"43","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":51,"title":["A Survey of Denial-of-Service and Distributed Denial of Service Attacks and Defenses in Cloud Computing"],"prefix":"10.3390","volume":"9","author":[{"given":"Adrien","family":"Bonguet","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9530-7643","authenticated-orcid":false,"given":"Martine","family":"Bellaiche","sequence":"additional","affiliation":[{"name":"Computer Engineering and Engineering Software, \u00c9cole Polytechnique de Montr\u00e9al, QC H3T 1J4, Canada"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"1968","published-online":{"date-parts":[[2017,8,5]]},"reference":[{"key":"ref_1","doi-asserted-by":"crossref","first-page":"583","DOI":"10.1016\/j.future.2010.12.006","article-title":"Addressing cloud computing security issues","volume":"28","author":"Zissis","year":"2012","journal-title":"Future Gener. Comput. Syst."},{"key":"ref_2","first-page":"4","article-title":"Cloud Computing: Infrastructure and Implementation Topics","volume":"12","author":"Sridhar","year":"2009","journal-title":"Int. Protoc. J. CISCO"},{"key":"ref_3","unstructured":"Los, R., Gray, D., Shackleford, D., and Sullivan, B. (2013). The Notorious Nine: Cloud Computing Top Threats in 2013, CSA, Cloud Security Alliance. Available online: https:\/\/downloads.cloudsecurityalliance.org\/initiatives\/top_threats\/The_Notorious_Nine_Cloud_Computing_Top_Threats_in_2013.pdf."},{"key":"ref_4","doi-asserted-by":"crossref","unstructured":"Ristenpart, T., Tromer, E., Shacham, H., and Savage, S. (2009). Hey, You, Get off of My Cloud: Exploring Information Leakage in Third-party Compute Clouds. CCS\u201909, Proceedings of the 16th ACM Conference on Computer and Communications Security, Chicago, IL, USA, 9\u201313 November 2009, ACM.","DOI":"10.1145\/1653662.1653687"},{"key":"ref_5","unstructured":"(2017, August 04). Amazon, EC2. Available online: https:\/\/aws.amazon.com\/ec2."},{"key":"ref_6","unstructured":"(2017, August 04). Service, A.W.. Available online: https:\/\/aws.amazon.com\/compliance\/data-privacy-faq\/."},{"key":"ref_7","unstructured":"Hewlett-Packard (2017, August 04). Security Overview of the Integrity Virtual Machines Architecture. Available online: http:\/\/h20564.www2.hpe.com\/hpsc\/doc\/public\/display?docId=emr_na-c02018861&DocLang=en&docLocale=en_US."},{"key":"ref_8","doi-asserted-by":"crossref","first-page":"5","DOI":"10.1186\/1869-0238-4-5","article-title":"An analysis of security issues for cloud computing","volume":"4","author":"Hashizume","year":"2013","journal-title":"J. Int. Serv. Appl."},{"key":"ref_9","doi-asserted-by":"crossref","unstructured":"Gonzalez, N., Miers, C., Redigolo, F., Carvalho, T., Simplicio, M., de Sousa, G., and Pourzandi, M. (December, January 29). A Quantitative Analysis of Current Security Concerns and Solutions for Cloud Computing. Proceedings of the 2011 IEEE Third International Conference on Cloud Computing Technology and Science (CloudCom), Athens, Greece.","DOI":"10.1109\/CloudCom.2011.39"},{"key":"ref_10","unstructured":"KrebsonSecurity (2017, August 03). DDoS on Dyn Impacts Twitter, Spotify, Reddit. Available online: https:\/\/krebsonsecurity.com\/2016\/10\/ddos-on-dyn-impacts-twitter-spotify-reddit\/."},{"key":"ref_11","unstructured":"(2017, August 03). Khandelwal, Massive DDoS Attacks against Dyn DNS 2016. Available online: http:\/\/thehackernews.com\/2016\/10\/dyn-dns-ddos.html."},{"key":"ref_12","doi-asserted-by":"crossref","first-page":"50","DOI":"10.1109\/MSP.2010.115","article-title":"Understanding Cloud Computing Vulnerabilities","volume":"9","author":"Grobauer","year":"2011","journal-title":"Secur. Priv. IEEE"},{"key":"ref_13","doi-asserted-by":"crossref","first-page":"833","DOI":"10.1016\/j.future.2012.01.006","article-title":"A Survey on Gaps, Threat Remediation Challenges and Some Thoughts for Proactive Attack Detection in Cloud Computing","volume":"28","author":"Khorshed","year":"2012","journal-title":"Future Gener. Comput. Syst."},{"key":"ref_14","doi-asserted-by":"crossref","first-page":"1","DOI":"10.3390\/computers3010001","article-title":"Cloud computing security: A survey","volume":"3","author":"Khalil","year":"2014","journal-title":"Computers"},{"key":"ref_15","doi-asserted-by":"crossref","first-page":"357","DOI":"10.1016\/j.ins.2015.01.025","article-title":"Security in cloud computing: Opportunities and challenges","volume":"305","author":"Ali","year":"2015","journal-title":"Inf. Sci."},{"key":"ref_16","doi-asserted-by":"crossref","first-page":"3724","DOI":"10.1002\/sec.1539","article-title":"A survey and taxonomy of DoS attacks in cloud computing","volume":"9","author":"Masdari","year":"2016","journal-title":"Secur. Commun. Netw."},{"key":"ref_17","doi-asserted-by":"crossref","first-page":"147","DOI":"10.1016\/j.jnca.2016.01.001","article-title":"Distributed denial of service (DDoS) resilience in cloud: Review and conceptual cloud DDoS mitigation framework","volume":"67","author":"Osanaiye","year":"2016","journal-title":"J. Netw. Comput. Appl."},{"key":"ref_18","doi-asserted-by":"crossref","unstructured":"Latanicki, J., Massonet, P., Naqvi, S., Rochwerger, B., and Villari, M. (2010). Scalable Cloud Defenses for Detection, Analysis and Mitigation of DDoS Attacks. Towards the Future Internet, IOS Press.","DOI":"10.3233\/978-1-60750-539-6-127"},{"key":"ref_19","doi-asserted-by":"crossref","first-page":"39","DOI":"10.3233\/JCS-2007-15103","article-title":"Securing vehicular ad hoc networks","volume":"15","author":"Raya","year":"2007","journal-title":"J. Comput. Secur."},{"key":"ref_20","doi-asserted-by":"crossref","unstructured":"Gruschka, N., and Iacono, L. (2009, January 6\u201310). Vulnerable Cloud: SOAP Message Security Validation Revisited. Proceedings of the IEEE International Conference on Web Services, Los Angeles, CA, USA.","DOI":"10.1109\/ICWS.2009.70"},{"key":"ref_21","doi-asserted-by":"crossref","unstructured":"Riquet, D., Grimaud, G., and Hauspie, M. (2012, January 4\u20136). Large-Scale Coordinated attacks: Impact on the Cloud Security. Proceedings of the 2012 Sixth International Conference on Innovative Mobile and Internet Services in Ubiquitous Computing (IMIS), Palermo, Italy.","DOI":"10.1109\/IMIS.2012.76"},{"key":"ref_22","unstructured":"Roesch, M. (1999, January 7\u201312). Snort-Lightweight Intrusion Detection for Networks. Proceedings of the LISA\u201999 13th USENIX Conference on System Administration, Berkeley, CA, USA."},{"key":"ref_23","doi-asserted-by":"crossref","first-page":"113","DOI":"10.1007\/s10207-013-0208-7","article-title":"Security issues in cloud environments: A survey","volume":"13","author":"Fernandes","year":"2014","journal-title":"Int. J. Inf. Secur."},{"key":"ref_24","doi-asserted-by":"crossref","first-page":"157","DOI":"10.1016\/j.comnet.2016.03.022","article-title":"{DDoS} attacks in cloud computing: Collateral damage to non-targets","volume":"109","author":"Somani","year":"2016","journal-title":"Comput. Netw."},{"key":"ref_25","doi-asserted-by":"crossref","unstructured":"Antunes, J., Neves, N., and Verissimo, P. (2008, January 10\u201314). Detection and Prediction of Resource-Exhaustion Vulnerabilities. Proceedings of the 19th International Symposium on Software Reliability Engineering, Seattle, WA, USA.","DOI":"10.1109\/ISSRE.2008.47"},{"key":"ref_26","doi-asserted-by":"crossref","unstructured":"Liu, H. (2010, January 8). A New Form of DOS Attack in a Cloud and Its Avoidance Mechanism. CCSW\u201910, Proceedings of the 2010 ACM Workshop on Cloud Computing Security Workshop, Chicago, IL, USA.","DOI":"10.1145\/1866835.1866849"},{"key":"ref_27","unstructured":"(2017, August 04). Presentation Demo vids: Amazon, B. Available online: https:\/\/sensepost.com\/blog\/2009\/blackhat-presentation-demo-vids-amazon\/."},{"key":"ref_28","doi-asserted-by":"crossref","unstructured":"Ye, X. (2008, January 17\u201320). Countering DDoS and XDoS Attacks against Web Services. Proceedings of the IEEE\/IFIP International Conference on Embedded and Ubiquitous Computing, Shanghai, China.","DOI":"10.1109\/EUC.2008.61"},{"key":"ref_29","unstructured":"WS-Attacks.org (2017, August 03). Coercive Parsing. Available online: http:\/\/www.ws-attacks.org\/Coercive_Parsing."},{"key":"ref_30","doi-asserted-by":"crossref","first-page":"37","DOI":"10.1016\/j.future.2014.03.003","article-title":"DDoS defense system for web services in a cloud environment","volume":"37","author":"Vissers","year":"2014","journal-title":"Future Gener. Comput. Syst."},{"key":"ref_31","doi-asserted-by":"crossref","unstructured":"Padmanabhuni, S., Singh, V., Senthil Kumar, K., and Chatterjee, A. (2006, January 18\u201322). Preventing Service Oriented Denial of Service (PreSODoS): A Proposed Approach. Proceedings of the 2006 International Conference on Web Services, Chicago, IL, USA.","DOI":"10.1109\/ICWS.2006.102"},{"key":"ref_32","unstructured":"Fox, A., Griffith, R., Joseph, A., Katz, R., Konwinski, A., Lee, G., Patterson, D., Rabkin, A., and Stoica, I. (2009). Above the Clouds: A Berkeley View of Cloud Computing, Department Electrical Engineering and Computer Sciences, University of California at Berkeley. Technical Report No. UCB\/EECS-2009-28."},{"key":"ref_33","doi-asserted-by":"crossref","unstructured":"Kandukuri, B., Paturi, V., and Rakshit, A. (2009, January 21\u201325). Cloud Security Issues. Proceedings of the 2009 IEEE International Conference on Services Computing, Bangalore, India.","DOI":"10.1109\/SCC.2009.84"},{"key":"ref_34","doi-asserted-by":"crossref","unstructured":"Zhao, S., Chen, K., and Zheng, W. (2009, January 27\u201329). Defend Against Denial of Service Attack with VMM. Proceedings of the 2009 Eighth International Conference on Grid and Cooperative Computing, Lanzhou, China.","DOI":"10.1109\/GCC.2009.14"},{"key":"ref_35","doi-asserted-by":"crossref","unstructured":"Alarifi, S., and Wolthusen, S.D. (2014, January 7\u201311). Mitigation of Cloud-Internal Denial of Service Attacks. Proceedings of the 2014 IEEE 8th International Symposium on Service Oriented System Engineering, Oxford, UK.","DOI":"10.1109\/SOSE.2014.71"},{"key":"ref_36","doi-asserted-by":"crossref","first-page":"42","DOI":"10.1016\/j.jnca.2012.05.003","article-title":"A survey of intrusion detection techniques in Cloud","volume":"36","author":"Modi","year":"2013","journal-title":"J. Netw. Comput. Appl."},{"key":"ref_37","doi-asserted-by":"crossref","unstructured":"Bakshi, A., and Dujodwala, Y.B. (2010, January 26\u201328). Securing Cloud from DDOS Attacks Using Intrusion Detection System in Virtual Machine. Proceedings of the 2010 Second International Conference on Communication Software and Networks, Singapore.","DOI":"10.1109\/ICCSN.2010.56"},{"key":"ref_38","doi-asserted-by":"crossref","first-page":"38","DOI":"10.1109\/MITP.2009.89","article-title":"Intrusion Detection for Grid and Cloud Computing","volume":"12","author":"Vieira","year":"2010","journal-title":"IT Prof."},{"key":"ref_39","doi-asserted-by":"crossref","first-page":"70","DOI":"10.15837\/ijccc.2013.1.170","article-title":"Detecting DDoS Attacks in Cloud Computing Environment","volume":"8","author":"Lonea","year":"2013","journal-title":"Int. J. Comput. Commun."},{"key":"ref_40","doi-asserted-by":"crossref","first-page":"2245","DOI":"10.1109\/TPDS.2013.181","article-title":"Can We Beat DDoS Attacks in Clouds?","volume":"25","author":"Yu","year":"2014","journal-title":"IEEE Trans. Parallel Distrib. Syst."},{"key":"ref_41","first-page":"226","article-title":"New Framework to Detect and Prevent Denial of Service Attack in Cloud Computing Environment","volume":"6","author":"Ismail","year":"2012","journal-title":"Int. J. Comput. Sci. Secur."},{"key":"ref_42","doi-asserted-by":"crossref","unstructured":"Liu, M., Dou, W., Yu, S., and Zhang, Z. (2014, January 10\u201314). A clusterized firewall framework for cloud computing. Proceedings of the 2014 IEEE International Conference on Communications (ICC), Sydney, Australia.","DOI":"10.1109\/ICC.2014.6883911"},{"key":"ref_43","doi-asserted-by":"crossref","unstructured":"Yang, L., Zhang, T., Song, J., Wang, J.S., and Chen, P. (2012, January 25\u201327). Defense of DDoS attack for cloud computing. Proceedings of the 2012 IEEE International Conference on Computer Science and Automation Engineering (CSAE), Zhangjiajie, China.","DOI":"10.1109\/CSAE.2012.6272848"},{"key":"ref_44","unstructured":"Services, A.W. (2017, August 03). AWS Best Practices for DDoS Resiliency. Available online: https:\/\/d0.awsstatic.com\/whitepapers\/DDoS_White_Paper_June2015.pdf."},{"key":"ref_45","doi-asserted-by":"crossref","unstructured":"Hwang, K., Kulkareni, S., and Hu, Y. (2009, January 12\u201314). Cloud Security with Virtualized Defense and Reputation-Based Trust Mangement. Proceedings of the 2009 Eighth IEEE International Conference on Dependable, Autonomic and Secure Computing, Chengdu, China.","DOI":"10.1109\/DASC.2009.149"},{"key":"ref_46","doi-asserted-by":"crossref","unstructured":"Wang, B., Zheng, Y., Lou, W., and Hou, Y. (2014, January 21\u201324). DDoS Attack Protection in the Era of Cloud Computing and Software-Defined Networking. Proceedings of the 2014 IEEE 22nd International Conference on Network Protocols (ICNP), Raleigh, NC, USA.","DOI":"10.1109\/ICNP.2014.99"},{"key":"ref_47","doi-asserted-by":"crossref","unstructured":"Mavroeidakos, T., Michalas, A., and Vergados, D.D. (2016, January 10\u201314). Security architecture based on defense in depth for Cloud Computing environment. Proceedings of the 2016 IEEE Conference on Computer Communications Workshops (INFOCOM WKSHPS), San Francisco, CA, USA.","DOI":"10.1109\/INFCOMW.2016.7562097"},{"key":"ref_48","doi-asserted-by":"crossref","unstructured":"Guenane, F., Nogueira, M., and Pujolle, G. (2014, January 15\u201319). Reducing DDoS attacks impact using a hybrid cloud-based firewalling architecture. Proceedings of the 2014 Global Information Infrastructure and Networking Symposium (GIIS), Montreal, QC, Canada.","DOI":"10.1109\/GIIS.2014.6934276"},{"key":"ref_49","doi-asserted-by":"crossref","unstructured":"Karnwal, T., Sivakumar, T., and Aghila, G. (2012, January 1\u20132). A comber approach to protect cloud computing against XML DDoS and HTTP DDoS attack. Proceedings of the 2012 IEEE Students\u2019 Conference on Electrical, Electronics and Computer Science (SCEECS), Bhopal, India.","DOI":"10.1109\/SCEECS.2012.6184829"},{"key":"ref_50","first-page":"1073","article-title":"Adaptable Practices for Curbing XDoS Attacks","volume":"3","author":"Karthigeyan","year":"2012","journal-title":"Int. J. Sci. Eng. Res."},{"key":"ref_51","doi-asserted-by":"crossref","first-page":"1097","DOI":"10.1016\/j.jnca.2010.06.004","article-title":"Cloud security defence to protect cloud computing against HTTP-DoS and XML-DoS attacks","volume":"34","author":"Chonka","year":"2011","journal-title":"J. Netw. Comput. Appl. Elsevier"},{"key":"ref_52","doi-asserted-by":"crossref","unstructured":"Chonka, A., and Abawajy, J. (2012, January 26\u201328). Detecting and Mitigating HX-DoS Attacks against Cloud Web Services. Proceedings of the 2012 15th International Conference on Network-Based Information Systems (NBiS), Melbourne, Australia.","DOI":"10.1109\/NBiS.2012.146"},{"key":"ref_53","doi-asserted-by":"crossref","first-page":"238230","DOI":"10.1155\/2015\/238230","article-title":"A Novel Protective Framework for Defeating HTTP-Based Denial of Service and Distributed Denial of Service Attacks","volume":"2015","author":"Saleh","year":"2015","journal-title":"Sci. World J."},{"key":"ref_54","doi-asserted-by":"crossref","unstructured":"Sairam, A.S., Roy, S., and Dwivedi, S.K. (2015, January 6\u201310). Using CAPTCHA Selectively to Mitigate HTTP-Based Attacks. Proceedings of the 2015 IEEE Global Communications Conference (GLOBECOM), San Diego, CA, USA.","DOI":"10.1109\/GLOCOM.2015.7417373"},{"key":"ref_55","first-page":"1","article-title":"How to Evaluate The Defense Against DoS and DDoS Attacks in Cloud Computing: A Survey and Taxonomy","volume":"14","author":"Halabi","year":"2016","journal-title":"Int. J. Comput. Sci. Inf. Secur."}],"container-title":["Future Internet"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/1999-5903\/9\/3\/43\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,11]],"date-time":"2025-10-11T18:41:32Z","timestamp":1760208092000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/1999-5903\/9\/3\/43"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2017,8,5]]},"references-count":55,"journal-issue":{"issue":"3","published-online":{"date-parts":[[2017,9]]}},"alternative-id":["fi9030043"],"URL":"https:\/\/doi.org\/10.3390\/fi9030043","relation":{},"ISSN":["1999-5903"],"issn-type":[{"value":"1999-5903","type":"electronic"}],"subject":[],"published":{"date-parts":[[2017,8,5]]}}}